CVE-2026-62832

HIGH7.8Published on August 11, 2026

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-59

Microsoft corregge 421 vulnerabilità: sfruttato uno zero-day in `afd.sys`

Vulnerabilities

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`

On August 11, 2026, Microsoft released security updates addressing 421 vulnerabilities. One of them is CVE-2026-68820 , a high-severity flaw actively

Aug 11, 20263 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`